Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
File: GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft (raw, json)
Hash identifier: UeFehsdqsIfbBiqXUZ0xWYjaKjKSjoMXQ7AmO7DnFUQ=
Subject key identifier: AD:77:7E:5C:23:02:2C:E8:C8:F6:62:5C:28:C0:AC:7C:7D:A0:DC:47
Authority key identifier: 1A:D6:D2:D4:0F:B1:D5:B2:CF:95:42:9B:FB:93:19:FC:2B:1C:C2:4A
Certificate issuer: /CN=1ad6d2d40fb1d5b2cf95429bfb9319fc2b1cc24a
Certificate serial: 019A71EEC94F58349BC70B053BF9CB792DB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
Manifest number: 0E07
Signing time: Tue 11 Nov 2025 08:01:05 +0000
Manifest this update: Tue 11 Nov 2025 08:01:05 +0000
Manifest next update: Wed 12 Nov 2025 08:01:05 +0000
Files and hashes: 1: GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl (hash: dNNbfogzgADdD+Za73h/IlKcIHGUSQnQ1nKU3WmatTo=)
2: JoxmLN3rVb0orFwC4m3JMhLjTCQ.roa (hash: PzCXitZFdSdIv2MGzL6nDSn7PkwlOAE3nyB9vmo6lwY=)
3: oXajxfRbk6N8eRRiT_ohkuBIZx0.roa (hash: pxyqg3KNDxfYN2gXtBCfn7xtRncbmC2U24gMFivJT6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:c9:4f:58:34:9b:c7:0b:05:3b:f9:cb:79:2d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad6d2d40fb1d5b2cf95429bfb9319fc2b1cc24a
Validity
Not Before: Nov 11 08:01:05 2025 GMT
Not After : Nov 12 08:01:05 2025 GMT
Subject: CN=ad777e5c23022ce8c8f6625c28c0ac7c7da0dc47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1e:10:27:be:ae:ad:de:68:65:6e:d2:e2:78:
d4:9a:78:22:be:59:2f:24:88:be:3a:5d:97:26:ba:
10:37:f6:0d:7e:47:50:ac:48:47:41:e3:13:57:d8:
26:8d:b4:03:82:26:75:5f:72:68:86:24:d9:7b:fe:
69:ce:3b:68:60:b9:b5:06:96:7e:7b:27:dc:0d:3e:
b9:2f:3c:b6:2a:e2:7d:f6:c6:ac:df:39:46:44:26:
5e:e6:51:5d:1e:b2:6a:c3:0e:18:c3:f9:59:e7:4e:
22:ca:92:9b:ea:83:bb:75:fd:64:27:2d:c3:63:40:
ac:8d:0d:ac:3a:53:1a:a5:99:f8:81:fd:58:39:33:
66:9e:96:16:6c:85:0d:e3:44:51:33:cd:61:9c:7e:
dc:43:19:11:4a:a5:dc:dc:0d:9b:69:c0:8a:a0:8a:
07:f9:9c:62:1c:31:03:0b:9b:93:54:72:b4:11:a5:
b4:87:6b:8c:e7:86:40:8c:8d:2d:4c:51:25:c0:82:
86:63:21:f8:ce:e1:a6:ce:4c:a3:73:47:a2:40:53:
02:4d:a7:0c:2a:a9:8a:ac:d9:e1:c1:a9:33:da:5b:
2e:e9:bc:67:18:b7:2a:05:11:08:da:c6:50:f3:10:
3e:f3:b2:66:38:77:e5:3d:02:63:09:54:84:47:15:
b8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:77:7E:5C:23:02:2C:E8:C8:F6:62:5C:28:C0:AC:7C:7D:A0:DC:47
X509v3 Authority Key Identifier:
keyid:1A:D6:D2:D4:0F:B1:D5:B2:CF:95:42:9B:FB:93:19:FC:2B:1C:C2:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c5:ff:4a:5e:46:fa:24:ad:b0:09:a1:c9:51:9f:59:18:bc:
04:c1:e3:7f:97:d6:0d:7f:ea:f4:4a:0e:8e:96:91:fb:7f:4f:
67:21:f8:4a:c3:1b:4c:3c:6b:f0:10:00:04:dd:93:a9:18:02:
5c:3d:02:78:27:b0:96:2d:0c:cd:60:77:55:3d:2a:0b:e3:11:
58:d3:dc:65:25:dd:c9:56:ae:cf:75:c8:5c:8e:a1:03:31:39:
e4:0b:3a:14:25:9e:71:be:8c:aa:4b:af:f2:41:b2:56:45:9a:
9d:f2:bf:5e:79:61:ae:c6:2c:55:ff:82:25:f0:89:12:0c:58:
eb:93:ec:a3:6a:a7:e9:64:80:c8:3b:56:c6:20:b3:8c:bd:2e:
de:1e:4a:d6:16:96:34:53:75:5a:d7:00:ba:02:60:8e:5a:7a:
9f:f6:82:71:82:42:f2:c5:a6:58:c6:98:b8:28:87:89:47:17:
0d:12:ad:9e:8e:ea:14:25:17:b5:89:d9:8d:ba:a6:68:30:93:
e2:f1:95:47:e6:94:7a:b0:9a:90:cb:4f:e5:cb:c1:ae:4b:df:
1d:65:c7:e2:7e:48:b4:3d:c9:de:b5:77:d9:64:6f:80:0f:16:
45:90:c9:b4:b7:02:13:13:74:00:71:c1:16:9d:50:bb:a3:58:
16:b5:d8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:09 2025 by rpki-client